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REMARKS/ARGUMENTS 

1. ) Claim Amendments 

The Applicant has amended Claims 1, 8 and 19. Applicant respectfully submits 
no new matter has been added. Accordingly, Claims 1-12 and 19-22 are pending in the 
application. Favorable reconsideration of the application is respectfully requested in 
view of the foregoing amendments and the following remarks. 

2. ) Examiner Objections - Claims 

The Examiner objected to Claims 1-12 and 19-22 because of informalities. 
Again, the Applicant appreciates the Examiner's thorough review of the claims. The 
Applicant has amended the claims as suggested by the Examiner in order to correct the 
informalities. The Examiner's consideration of the amended claims is respectfully 
requested. 

3. ) Claim Rejections -35 U.S.C. § 112 

The Examiner objected to Claims 8 and 19 under 35 U.S.C. § 112 as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. The Applicant has amended the claims to provide 
sufficient antecedent basis for the claimed elements. The Examiner's consideration of 
the amended claims is respectfully requested. 

4. ) Claim Rejections - 35 U.S.C. § 103 (a) 

The Examiner rejected: claims 1-5 and 7 under 35 U.S.C. § 103(a) as being 
unpatentable over Tabuki (US 5,841,970) in view of Kippenhan (US 2002/0010769), in 
further view of Doonan (US 6,807,277), in further view of Hammond (US 2003/078927); 
claim 6 under 35 U.S.C. § 103(a) as being unpatentable over Tabuki in view of 
Kippenhan, in further view of Doonan, in further view of Hammond, in further view of 
Takamoto (US 2002/0108060); claims 8-9 and 19-20 under 35 U.S.C. § 103(a) as being 
unpatentable over Tabuki in view of Doonan, in further view of Hammond; claim 12 
under 35 U.S.C. § 103(a) as being unpatentable over Tabuki in view of Doonan, in 
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further view of Hammond, in further view of Takamoto; and claims 10-11 and 21-22 
under 35 U.S.C. § 103(a) as being unpatentable over Tabuki in view of Doonan, in 
further view of Hammond, in further view of Dang (US 2003/0101 13), in further view of 
Honjo (US 2002/0049912). 

The Applicant respectfully traverses the Examiner's rejection. A favorable 
reconsideration in view of the above amendments and the following remarks is 
earnestly requested. The Examiner's consideration of the amended claims is 
respectfully requested. 

Claim 1 

As recited in claim 1, when the mobile station first authenticates with the 
authentication server, the authentication server provides the mobile station with a first 
key. This first key is then used by the mobile station when requesting access to a 
certain database record within a database server. In response to a determination that 
the mobile station has the authority to access the requested database record, the 
authentication server performs the following two steps: (1) instructs the database server 
to provide the requested information to the mobile station wherein the information is 
encrypted; and (2) provides the mobile station with a second key enabling the mobile 
station to decrypt the encrypted information received from the database server. 

The Applicant respectfully submits that the cited references fail to anticipate or 
render obvious each and every element of the presently pending independent claims. 
More specifically, none of the cited references, either alone or in combination, discloses: 
(a) a mobile station communicating separately with an authentication server and a 
database server; (b) more than one authentication request associated with a mobile 
station; (c) an authentication server determining whether the mobile station has 
authority to access a particular database record via a database server; and (d) an 
authentication server providing two keys to a mobile station so that it can access a 
database record. As a result, the Applicant respectfully submits that claim 1 is 
allowable under 35 U.S.C. § 103(a) over the cited references. 

First, the Applicant respectfully submits that the cited references, either alone or 
in combination, do not disclose, teach or suggest a mobile station communicating 
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separately with an authentication server and a database server as recited in claim 1 . 
Tabuki discloses a client, an application server and a verification server (Figure 1). The 
client sends authentication data to the application server (Abstract; Figure 1, "b"; col. 4, 
lines 10-14), which verifies the authentication data by forwarding the authentication data 
to a verification server for authentication (Abstract; Figure 1, "c"; col. 4, line 17-22). The 
client does not communicate directly with the verification server (Figure 1). Contrary to 
the teachings of Tabuki, the mobile station recited in claim 1 communicates separately 
with the authentication server and the database server. 

The Examiner cited column 6, lines 1 1-47 for the first authentication request from 
the mobile station to the authentication server (Office Action page 3, lines 14-17). This 
interpretation is incorrect because the verification server in Tabuki performs the 
authentication (col. 4, lines 23-35; col. 6, lines 30-43) and notifies the application server 
of the result (Abstract; Figure 1, "d"; col. 4, lines 35-37). In fact, Tabuki's stated purpose 
is to remove authentication responsibility from the application server and perform 
authentication at the verification server in order to reduce load on the application server 
(col. 1 lines 40-49). As a result, Tabuki does not disclose, teach or suggest "receiving 
a first authentication request at an authentication server from a mobile station and 
providing a first key from said authentication server to said mobile station in response to 
said authentication." 

Likewise, Tabuki does not disclose, teach or suggest "providing by said 
authentication server to said mobile station a second key enabling said mobile station to 
decrypt said information received from said database server using said second key." As 
previously discussed, the client in Tabuki does not communicate directly with the 
verification server (Figure 1). Contrary to the teachings of Tabuki, the authentication 
server recited in claim 1 communicates directly with the mobile station. 

Kippenham, Doonan and Hammond do not cure the deficiencies of Tabuki. 
Kippenham discloses a client-server system that works with the user's browser to 
automatically insert stored user data into data fields of a currently displayed web page 
on the user's browser to complete a transaction (paragraphs [0031], [0037]). The 
authentication process described in Kippenham is no different than the prior art process 
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for which Tabuki is attempting to improve - a server containing the requested data 
authenticates the user (paragraph [0030]). Doonan discloses a key server that allows a 
sender to encrypt a message and a recipient to decrypt the encrypted message (Figure 
2). Doonan does not disclose a database server or using the key to access data stored 
on a database server. Hammond discloses a server (Wizard Central) that grants 
access to other resources on a case-by-case basis (paragraph [0016], Figure 1). Again, 
the authentication process described in Hammond is no different than the prior art 
process for which Tabuki is attempting to improve - a server having access to the 
requested data authenticates the user (paragraph [0016]). Kippenham, Doonan and 
Hammond do not disclose a separate authentication server that communicates with the 
user to grant access to data on a database server that is accessed directly by the user 
(authentication server does not act as a portal). Accordingly, the cited references, 
either alone or in combination, do not disclose, teach or suggest a mobile station 
communicating separately with an authentication server and a database server as 
recited in claim 1. 

Second, the Applicant respectfully submits that the cited references, either alone 
or in combination, do not disclose, teach or suggest more than one authentication 
request associated with a mobile station. Tabuki only discloses one authentication 
request. The Examiner cited column 6, lines 11-47 for the first authentication request 
(Office Action page 3, lines 14-17) and column 7, line 38 to column 8, line 27 for the 
second authentication request (Office Action page 3, lines 18-30). This interpretation is 
incorrect, because both of these portions of Tabuki refer to the same authentication 
request (compare Figure 1 to Figure 6). The Examiner later acknowledges this fact: 
'Tabuki is silent as to whether the first key is received at the user (first station) after an 
authentication process." As a result, Tabuki (col. 6, lines 11-7 and elsewhere) does not 
disclose, teach or suggest: (a) receiving a first authentication request at an 
authentication server from a mobile station : (b) providing a first key from said 
authentication server to said mobile station in response to said authentication; (c) 
receiving a second authentication request at said authentication server from a database 
server , said second authentication request further including said first key provided by 
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said authentication server to said mobile station and a particular data identifying a 
database record to which said mobile station is requesting access; and (d) providing by 
said authentication server to said mobile station a second key enabling said mobile 
station to decrypt said information received from said database server using said 
second key. 

Kippenham, Doonan and Hammond do not cure the deficiencies of Tabuki. 
Kippenham only discloses one authentication request (paragraphs [0031], [0037]). 
Doonan only discloses one authentication request by the sender (Figure 2). Hammond 
only discloses one authentication request (paragraph [0016]). Kippenham, Doonan and 
Hammond do not disclose more than one authentication request associated with a 
mobile station. Accordingly, the cited references, either alone or in combination, do not 
disclose, teach or suggest more than one authentication request associated with a 
mobile station as recited in claim 1. 

Third, the Applicant respectfully submits that the cited references, either alone or 
in combination, do not disclose, teach or suggest an authentication server determining 
whether the mobile station has authority to access a particular database record via a 
database server. Tabuki merely authenticates a particular application client against an 
application server and fails to discuss or disclose the "authorization" process regarding 
a particular database record as currently claimed. In other words, not all data records 
stored within the database server are accessible by a particular mobile station and 
nothing in Tabuki discloses this selectively authorization process using the first key as 
claimed by the present invention. As a result, Tabuki does not disclose, teach or 
suggest an authentication server determining whether the mobile station has authority 
to access a particular database record via a database server. 

Kippenham, Doonan and Hammond do not cure the deficiencies of Tabuki. 
Kippenham only discloses that access to the user's data is granted or denied 
(paragraphs [0031], [0037]). As previously described, Doonan only discloses a process 
to encrypt and decrypt messages between a sender and a recipient (Figure 2). 
Although Hammond discloses categorized access, such access is granted or denied in 
accordance with a single authentication request and the authentication server acts as 
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the portal to provide the requested information (paragraph [0016]). As recited in claim 
1, the present invention requires two authentication requests and the authentication 
does not act as the portal to provide the requested information. Accordingly, the cited 
references, either alone or in combination, do not disclose, teach or suggest an 
authentication server determining whether the mobile station has authority to access a 
particular database record via a database server as recited in claim 1. 

Fourth, the Applicant respectfully submits that the cited references, either alone 
or in combination, do not disclose, teach or suggest an authentication server providing 
two keys to a mobile station so that it can access a database record. Although Tabuki 
discloses a verification server that stores a Sys Uniqe Key, an App. User Key and an 
Additional App. User Key (FIGURE 4), two of these keys are not provided to the user 
and subsequently used by the user to access a database record. Tabukrs App. User 
Key and Additional App. User Key are not provided to the user; instead, they are only 
used by the verification server to indicate whether the user is eligible to receive services 
provided by the application server (col. 6, lines 19-23). As a result, Tabuki does not 
disclose, teach or suggest an authentication server providing two keys to a mobile 
station so that it can access a database record. 

Kippenham, Doonan and Hammond do not cure the deficiencies of Tabuki. 
Kippenham only discloses that access to the user's data is granted or denied 
(paragraphs [0031], [0037]). As previously described, Doonan only discloses a process 
to encrypt and decrypt messages between a sender and a recipient (Figure 2). 
Although Hammond discloses categorized access, such access is granted or denied in 
accordance with a single authentication request and the authentication server acts as 
the portal to provide the requested information (paragraph [0016]). As recited in claim 
1, the present invention requires two authentication requests and the authentication 
does not act as the portal to provide the requested information. Accordingly, the cited 
references, either alone or in combination, do not disclose, teach or suggest an 
authentication server determining whether the mobile station has authority to access a 
particular database record via a database server as recited in claim 1. 
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For at least the reasons as provided above, the Applicant submits that 
independent Claim 1 and its dependent claims are now patentable over the cited 
references and a Notice of Allowance is respectfully requested. 

Claims 8 and 19 

The Applicant respectfully submits that the cited references fail to anticipate or 
render obvious each and every element of the presently pending independent claims. 
More specifically, none of the cited references, either alone or in combination, discloses: 
a mobile station communicating separately with an authentication server and a 
database server. As a result, the Applicant respectfully submits that claims 8 and 19 
are allowable under 35 U.S.C. § 103(a) over the cited references. 

As previously described, the Applicant respectfully submits that the cited 
references, either alone or in combination, do not disclose, teach or suggest a mobile 
station communicating separately with an authentication server and a database server 
as recited in claims 8 and 19. Tabuki discloses a client, an application server and a 
verification server (Figure 1). The client sends authentication data to the application 
server (Abstract; Figure 1, "b"; col. 4, lines 10-14), which verifies the authentication data 
by forwarding the authentication data to a verification server for authentication (Abstract; 
Figure 1, "c"; col. 4, line 17-22). The client does not communicate directly with the 
verification server (Figure 1). Contrary to the teachings of Tabuki. the mobile station 
recited in claims 8 and 19 communicates separately with the authentication server and 
the database server. 

Kippenham, Doonan and Hammond do not cure the deficiencies of Tabuki. 
Kippenham discloses a client-server system that works with the user's browser to 
automatically insert stored user data into data fields of a currently displayed web page 
on the user's browser to complete a transaction (paragraphs [0031], [0037]). The 
authentication process described in Kippenham is no different than the prior art process 
for which Tabuki is attempting to improve - a server containing the requested data 
authenticates the user (paragraph [0030]). Doonan discloses a key server that allows a 
sender to encrypt a message and a recipient to decrypt the encrypted message (Figure 
2). Doonan does not disclose a database server or using the key to access data stored 
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on a database server. Hammond discloses a server (Wizard Central) that grants 
access to other resources on a case-by-case basis (paragraph [0016], Figure 1). Again, 
the authentication process described in Hammond is no different than the prior art 
process for which Tabuki is attempting to improve - a server having access to the 
requested data authenticates the user (paragraph [0016]). Kippenham, Doonan and 
Hammond do not disclose a separate authentication server that communicates with the 
user to grant access to data on a database server that is accessed directly by the user 
(authentication server does not act as a portal). Accordingly, the cited references, 
either alone or in combination, do not disclose, teach or suggest a mobile station 
communicating separately with an authentication server and a database server as 
recited in claims 8 and 19. 

For at least the reasons as provided above, the Applicant submits that 
independent Claims 8 and 19 and their respective dependent claims are now patentable 
over the cited references and a Notice of Allowance is respectfully requested. 
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In view of the foregoing remarks, the Applicant believes all of the claims currently 
pending in the Application to be in a condition for allowance. The Applicant, therefore, 
respectfully requests that the Examiner withdraw all rejections and issue a Notice of 
Allowance for all pending claims. 

The Applicant requests a telephonic interview if the Examiner has any questions 
or requires any additional information that would further or expedite the prosecution of 
the Application. 
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